Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vUs4VfSQjFkA3RlneHWbMStXUo0.roa
File: vUs4VfSQjFkA3RlneHWbMStXUo0.roa (raw, json)
Hash identifier: moU98np2RK5NJ84Yi80UMTp/j9bMiTTMLbv+Edob8vs=
Subject key identifier: BD:4B:38:55:F4:90:8C:59:00:DD:19:67:78:75:9B:31:2B:57:52:8D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247270C299857B44BCE8054CCDCCB3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vUs4VfSQjFkA3RlneHWbMStXUo0.roa
Signing time: Thu 02 Jan 2025 17:51:04 +0000
ROA not before: Thu 02 Jan 2025 17:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35197
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:72:70:c2:99:85:7b:44:bc:e8:05:4c:cd:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd4b3855f4908c5900dd196778759b312b57528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:ff:8a:c8:15:a6:cf:13:31:69:b5:f6:71:
d8:76:71:3c:09:64:17:b8:3b:80:35:00:29:c5:2c:
1a:1c:dd:0c:e3:75:f8:37:c2:f8:0e:45:88:e2:58:
b3:de:d0:ae:2a:06:06:53:5b:9f:9a:0b:8a:10:6c:
bc:17:be:75:07:e3:e3:c7:13:42:bf:03:3f:77:80:
e3:99:34:5f:d3:7d:8e:90:e1:bc:69:cd:63:18:07:
1e:f7:42:02:09:4c:8c:15:6d:8d:76:ff:85:3c:62:
2f:20:0b:1f:7b:50:44:4a:b1:67:88:6d:96:57:00:
01:72:02:24:d5:66:ab:e7:38:42:4f:22:4d:f1:66:
af:10:82:3a:51:b1:2a:17:fc:33:97:c2:2b:dd:e5:
43:41:eb:b7:75:58:24:eb:dd:63:a1:2a:96:66:31:
72:13:41:49:2c:41:96:81:17:37:c0:be:45:f2:7d:
fd:37:cd:86:1e:b1:14:3d:3f:b0:2d:4c:85:8b:bf:
30:45:81:a3:87:e1:2a:08:6e:92:0c:1e:55:a2:da:
2c:a9:17:99:d6:80:93:25:b7:c3:6c:76:fd:70:38:
20:e8:a7:fc:e3:20:63:20:2b:40:97:ca:df:5e:15:
b1:d6:6e:ab:07:90:20:b6:d3:90:5d:2f:92:2f:a3:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:38:55:F4:90:8C:59:00:DD:19:67:78:75:9B:31:2B:57:52:8D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vUs4VfSQjFkA3RlneHWbMStXUo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
68:80:17:0f:5f:6b:84:91:f7:1c:95:f5:a6:6e:b7:83:31:03:
8c:18:9e:9b:1f:dc:72:a8:82:7f:4d:32:5a:51:77:43:24:40:
1d:10:22:d3:e0:cc:46:17:35:88:84:39:76:c5:79:4b:ce:c3:
c8:9b:e5:bf:90:1e:8c:83:4a:3f:24:ed:af:28:f1:8b:2c:36:
31:e8:0e:34:37:48:65:fd:e2:72:af:0c:e9:7c:58:88:64:15:
0e:43:f9:a8:11:09:22:38:ad:1f:ec:03:d0:a1:e2:6f:ff:16:
82:52:3e:a5:db:62:0f:ba:3f:1b:4f:84:cf:89:64:6e:e8:b1:
16:ef:83:ff:a7:c5:65:78:cf:45:20:c0:a3:4c:b6:60:9b:26:
5f:5f:d1:6d:0b:75:6c:17:4f:1e:06:ad:a9:d3:c7:f4:d9:49:
4a:24:36:28:fe:2a:98:48:8d:a1:e4:ca:c9:50:94:21:4b:b8:
98:04:82:df:f2:a5:3c:e1:83:2e:c6:34:7e:89:9e:c7:bc:55:
2c:2c:d9:a3:e0:4a:79:10:73:fb:4b:cd:e8:6d:25:2b:bb:19:
24:1c:60:34:a5:98:3f:94:f6:35:8c:d8:77:bb:e0:7a:fb:04:
6a:a5:eb:6e:cd:85:0e:e1:99:08:e6:2d:5a:97:d5:8f:9b:59:
25:5d:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client